Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

78 results

emby_ssrf

btnz-k/emby_ssrf

Metasploit auxiliary module that identifies Emby Media Server version and exploits CVE-2020-26948 SSRF vulnerability to scan internal network…

exploitationnetwork-mappingreconnaissance+3

5 years ago

Multi-VLAN-Enterprise-Network-Vulnerability-Assessment

klairmanraj/multi-vlan-enterprise-network-vulnerability-assessment

Multi-VLAN enterprise network vulnerability assessment using Nessus, OWASP ZAP, and Wireshark. Confirms Stored XSS on WebGoat and EternalBlue…

exploitationnetwork-mappingnetwork-security+6

6 months ago

Telerik_CVE-2019-18935

thanhuutuan/telerik_cve-2019-18935

TelerikUI Vulnerability Scanner (CVE-2019-18935)

exploitationnetwork-mappingpenetration-testing+3

123 years ago

CVE-2025-64459-hunter

purehate/cve-2025-64459-hunter

CVE-2025-64459-hunter

exploitationnetwork-mappingport-scanning+3

8 months ago

Telerik_CVE-2019-18935

appliedi/telerik_cve-2019-18935

TelerikUI Vulnerability Scanner (CVE-2019-18935)

exploitationnetwork-mappingpenetration-testing+3

6 years ago

Telerik_CVE-2019-18935

becrevex/telerik_cve-2019-18935

TelerikUI Vulnerability Scanner (CVE-2019-18935)

exploitationnetwork-mappingpenetration-testing+3

5 years ago

pentest-mcp

dmontgomery40/pentest-mcp

NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR,…

exploitationfuzzingnetwork-mapping+8

1501 day ago

CVE-2026-61511-PoC-Exploit

tc4dy/cve-2026-61511-poc-exploit

CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full…

database-securityexploitationnetwork-mapping+7

621 days ago

CVE-2020-5902-NSE

rwincey/cve-2020-5902-nse

Nmap NSE script for detecting and exploiting CVE-2020-5902, a remote code execution vulnerability in F5 BIG-IP traffic management user interface.

exploitationnetwork-mappingpenetration-testing+2

86 years ago

WebLogic-SSRF_CVE-2014-4210

nhpt/weblogic-ssrf_cve-2014-4210

Weblogic SearchPublicRegistries SSRF(CVE-2014-4210) Exploit Script based on Python3

exploitationnetwork-mappingport-scanning+3

115 years ago

JavaDeserialization

etocheney/javadeserialization

针对类似CVE-2017-10271漏洞的一个java反序列化漏洞扫描器

exploitationnetwork-mappingpayload-generation+3

97 years ago

cve-2024-10914-port

retuci0/cve-2024-10914-port

dlink vulnerability thing in python and rust

exploitationnetwork-mappingpenetration-testing+3

1 year ago

HIKRAVEN

sylhetyhackvenger/hikraven

HIKRAVEN - Advanced Hikvision Security Assessment Platform for professional penetration testing. Detects 12+ CVEs including CVE-2021-36260…

exploitationinformation-gatheringiot-security+6

102 months ago

Sitadel

shenril/sitadel

Web Application Security Scanner

information-gatheringpenetration-testingvulnerability-scanners+3

61117 days ago

nmap-log4shell

giterlizzi/nmap-log4shell

Nmap NSE script for detecting Apache Log4j RCE (CVE-2021-44228) by injecting JNDI exploit payloads via HTTP headers or TCP/UDP sockets across…

exploitationnetwork-securitypayload-generation+4

794 years ago

CVE-2018-20555

fs0c131y/cve-2018-20555

Exploit for CVE-2018-20555: automated discovery and takeover of Twitter accounts via leaked API keys in vulnerable Social Network Tabs WordPress…

crawlerexploitationinformation-gathering+3

717 years ago

CVE-2025-59213

synacktiv/cve-2025-59213

Unauthenticated SQL injection exploit for Microsoft Configuration Manager (SCCM) 2503, enabling arbitrary SQL execution on the site database via the…

database-securityexploitationpenetration-testing+2

35 months ago

CVE-2025-24132-Scanner

feralthedogg/cve-2025-24132-scanner

mDNS-based AirPlay device discovery tool that scans local networks and tests for CVE-2025-24132 zero-click HTTP RCE vulnerability with a simple GUI…

exploitationinformation-gatheringnetwork-mapping+3

31 year ago

Previous12 3 4 5 Next